76
Appendices
Restrictions
Overview
Apple devices support the following policies and restrictions, which you can congure to
meet the needs of your organization. Depending on your MDM solution, the names of these
restrictions may vary slightly.
Note: Not all restrictions are available for all Apple devices.
Device Enrollment Program settings
The following restrictions apply to Apple devices assigned to MDM servers using the Device
Enrollment Program.
Enrollment options
•
Prompt user to enroll device: When this option is on, the device prompts the user to enroll the
device in MDM. The default is o.
The following settings are subsets of the one above.
•
Do not allow user to skip enrollment step: When this option is on, the user must enroll the
device in MDM before they can set up the device. The default is o.
•
Require credentials for enrollment: When this option is o, users do not need to authenticate
to a directory service before they enroll the device in MDM. The default is on.
•
Supervise device (iOS-only): When this option is on, the device is supervised during
enrollment and can’t be unenrolled by the user. The default is o.
The following setting is a subset of the one above.
•
Allow pairing (iOS-only): When this option is o, users can’t pair their device with a computer.
The default is on.
•
Prevent unenrollment: When this option is on, a supervised iOS device can’t be unenrolled by
the user. Mac computers can be unenrolled if the user has the administrator user name and
password. The default is o.
Setup Assistant options
Apple devices enrolled in the Device Enrollment Program and managed by MDM can have these
Setup Assistant screens skipped (the default for all options is on):
Unless these items are also permanently restricted using the MDM solution, users can perform
any of these after the Apple device is set up.
•
Set up as a new device or restore from backup: When this option is o, the user can’t select
between the two choices.
•
Allow user to enter their Apple ID: When this option is o, the user can’t enter their Apple ID.
•
Allow user to view the Terms and Conditions: When this option is o, the user can’t review the
Apple Terms and Conditions.
100% resize factor
10
